$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3361B8500E929AFEE58BD9E5708ACE056EEB73DB.cer File: 3361B8500E929AFEE58BD9E5708ACE056EEB73DB.cer (raw, json) Hash identifier: glOK/5hhHDoCu9T/ZNK7DZpmObFFgRi6hqnCFDv4CMA= Subject key identifier: 33:61:B8:50:0E:92:9A:FE:E5:8B:D9:E5:70:8A:CE:05:6E:EB:73:DB Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 118E8EC2ACBB84283CF1B0D427D5F6CA179A8CE7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/3361B8500E929AFEE58BD9E5708ACE056EEB73DB.mft caRepository: rsync://rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 20 Oct 2025 19:42:13 +0000 Certificate not after: Mon 19 Oct 2026 19:47:13 +0000 Subordinate resources: AS: 271169 IP: 179.48.196.0/22 IP: 2804:774c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:8e:8e:c2:ac:bb:84:28:3c:f1:b0:d4:27:d5:f6:ca:17:9a:8c:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 20 19:42:13 2025 GMT Not After : Oct 19 19:47:13 2026 GMT Subject: CN=3361B8500E929AFEE58BD9E5708ACE056EEB73DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:54:4e:f9:70:f6:78:be:10:25:cc:6e:4e:fa: 07:80:c2:42:11:91:36:4f:57:01:1f:6d:8c:a4:9f: 6d:46:27:57:0a:83:17:43:14:30:84:79:a6:79:6c: 37:77:d2:4f:26:f4:fd:a2:00:97:5b:cb:51:8e:f7: 1d:b6:c3:5f:12:ba:97:d3:72:40:13:2b:8f:65:7d: 0d:95:d9:84:a3:9f:f5:a0:83:19:d2:9e:91:3e:0c: 51:29:f5:91:69:bf:d8:84:ff:bb:0c:40:50:a9:c7: 77:cf:bb:63:71:75:75:54:dd:ff:7b:da:23:d4:ba: 66:01:00:26:bd:75:c1:37:81:d2:9b:64:14:17:52: 4a:25:48:c7:f3:9e:2b:1d:9a:48:16:ac:ee:99:f4: 2c:65:36:d7:7d:e7:3a:b4:55:6f:3a:6a:f1:ee:52: 61:82:43:17:9e:8f:1f:96:6a:fd:ba:1a:ad:0a:af: eb:d6:e6:a8:18:81:9f:55:d4:59:dd:52:06:63:91: 06:f1:8e:97:c7:93:56:51:be:e3:96:80:c5:4f:dd: 93:64:e6:40:db:42:4f:83:7f:6e:d0:a6:74:ef:b7: 30:c5:e7:13:52:bc:cf:f8:34:b9:75:c2:1c:61:55: 51:f2:28:83:35:09:f1:cc:21:f2:85:cb:86:f5:8d: b5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 33:61:B8:50:0E:92:9A:FE:E5:8B:D9:E5:70:8A:CE:05:6E:EB:73:DB X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/3361B8500E929AFEE58BD9E5708ACE056EEB73DB.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.48.196.0/22 IPv6: 2804:774c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271169 Signature Algorithm: sha256WithRSAEncryption cb:57:de:a0:05:cb:2e:6f:fa:e1:f9:fb:49:f0:77:02:d9:f7: cc:ee:82:13:d5:31:0b:4f:ec:0d:d4:7f:70:1f:cc:d5:46:99: 6b:0e:f2:b9:09:e4:07:12:27:83:c9:e1:46:fd:5a:b4:50:f4: 9a:84:36:c8:e0:36:8a:6c:7a:bb:13:af:6c:52:03:5a:5c:0a: f2:8e:bf:c7:9b:0a:e2:d3:6d:7e:a5:c8:69:81:a9:52:94:5e: a8:3f:95:00:cb:c9:0a:35:c3:7e:0b:67:bb:7e:72:d6:6f:12: 12:a5:2c:d0:4c:df:83:d5:c9:84:42:02:45:18:55:84:8a:fd: c6:5b:15:c0:a0:c5:9d:88:a6:62:87:d7:70:b4:7d:47:68:16: 20:f9:47:77:e1:5a:f2:16:7e:49:cb:7e:d7:e0:07:94:d7:62: b1:7f:97:93:1e:b6:b2:2d:80:5c:d5:95:cd:d6:85:63:38:c2: f1:fa:eb:b0:2f:ea:52:34:d8:36:d3:71:a5:72:ed:f3:43:0c: cd:b7:a3:a1:ee:71:fb:fa:75:08:da:28:d9:eb:d1:7c:1b:7e: de:88:c9:d3:8f:d8:29:7e:7a:30:e2:37:22:4a:a5:90:0a:86: a5:2e:63:ac:9a:00:1e:58:58:8f:44:5d:80:d6:bf:80:9a:f3: bd:0a:7a:df -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUEY6Owqy7hCg88bDUJ9X2yheajOcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMjAxOTQyMTNaFw0yNjEwMTkxOTQ3MTNaMDMxMTAvBgNV BAMTKDMzNjFCODUwMEU5MjlBRkVFNThCRDlFNTcwOEFDRTA1NkVFQjczREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzVE75cPZ4vhAlzG5O+geAwkIR kTZPVwEfbYykn21GJ1cKgxdDFDCEeaZ5bDd30k8m9P2iAJdby1GO9x22w18SupfT ckATK49lfQ2V2YSjn/WggxnSnpE+DFEp9ZFpv9iE/7sMQFCpx3fPu2NxdXVU3f97 2iPUumYBACa9dcE3gdKbZBQXUkolSMfznisdmkgWrO6Z9CxlNtd95zq0VW86avHu UmGCQxeejx+Wav26Gq0Kr+vW5qgYgZ9V1FndUgZjkQbxjpfHk1ZRvuOWgMVP3ZNk 5kDbQk+Df27QpnTvtzDF5xNSvM/4NLl1whxhVVHyKIM1CfHMIfKFy4b1jbVbAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQzYbhQDpKa/uWL 2eVwis4Fbutz2zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ3hw YWlnTFl6MnFDdlBkZVdReVBEVGlLMmZGVzFhQjhGNkVMWkRyUUU3bXovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0N4 cGFpZ0xZejJxQ3ZQZGVXUXlQRFRpSzJmRlcxYUI4RjZFTFpEclFFN216LzAvMzM2 MUI4NTAwRTkyOUFGRUU1OEJEOUU1NzA4QUNFMDU2RUVCNzNEQi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCszDEMA0EAgACMAcDBQAoBHdMMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQjQTANBgkqhkiG9w0BAQsFAAOCAQEAy1feoAXLLm/64fn7 SfB3Atn3zO6CE9UxC0/sDdR/cB/M1UaZaw7yuQnkBxIng8nhRv1atFD0moQ2yOA2 imx6uxOvbFIDWlwK8o6/x5sK4tNtfqXIaYGpUpReqD+VAMvJCjXDfgtnu35y1m8S EqUs0Ezfg9XJhEICRRhVhIr9xlsVwKDFnYimYofXcLR9R2gWIPlHd+Fa8hZ+Sct+ 1+AHlNdisX+Xkx62si2AXNWVzdaFYzjC8frrsC/qUjTYNtNxpXLt80MMzbejoe5x +/p1CNoo2evRfBt+3ojJ04/YKX56MOI3IkqlkAqGpS5jrJoAHlhYj0RdgNa/gJrz vQp63w== -----END CERTIFICATE-----Generated at Mon Nov 3 05:19:29 2025 by rpki-client